Sharing Using Social Networks in a Composable Web of Things Presenter: Yong-Jin Jeong Korea University of Technology and Education Laboratory of Intelligent Networks

Abstract ”Web of Things” Digitally augmented everyday objects are seamlessly integrated to the Web by reusing Web patterns such as REST.REST. we propose a platform that enables people to share their Web enabled devices so that others can use them. Existing social networks. Open APIs. 2

Pervasive computing has been dealing to a large extent with the integration of digital artifacts with the physical world. Consumer electronics possess Internet connectivity (as for example the Chumby or Nabaztag). Introduction and Related work 3

A new breed of applications and research projects propose the integration of physical things with the Web [2], [3], [4]. The integration of smart things not only to the Internet (i.e. at the network level) but also to the Web (i.e. at the application level). Introduction and Related work 4

The success of Web mashups is closely dependent upon the trend for Web 2.0 services to provide access to some of their services through relatively (often REST-based) simple open APIs on the Web. Google, Twitter, Wordpress, Doodle, etc. Introduction and Related work 5

For example one could share the energy consumption sensors in his house with the community –> serious privacy violations. HTTP already provides authentication mechanisms ( based on credentials and server-side groups. (for free) Drawbacks.  when considering a large number of smart things it becomes quite unmanageable to share credentials for each of them. several platforms propose to overcome these limitations. Introduction and Related work 6

Without the need to recreate yet another social network or user database from scratch on a new online service. Unique channel: you can tell your friends about the sensors you shared with them by automatically posting messages to their profile or newsfeed. Introduction and Related work 7

we propose a system to share things and facilitate access to real-world services offering a RESTful Web API. Web platform called Social Access Controller Acts as an authentication and sharing proxy for smart things helping users to fine-tune the nature of interactions they want to allow for their smart things (e.g. read-only, read-write, etc.). Manages access control based on the existing social structure of several social networks in order to enable smart things owners to share with people they know and trust. Uses social networks for advertising shared smart things. Introduction and Related work 8

To share smart things via the Web, we first need seamlessly integrate them to the Web. smart things are connected to the Internet by embedding Web servers directly onboard. the functionalities of smart things are exposed as resources by applying the REST architectural style. We cannot assume that all smart things will be directly connected to the Internet and offer RESTful interfaces. Smart Gateway. bridges the Internet with a certain number of device specific protocols. (e.g. Bluetooth, Zigbee) Integrating smart things to the web 9

Resource Oriented Energy Meters. smart power plug called Plogg.  smart-wifi-power-outlet-learns/ smart-wifi-power-outlet-learns/  However, the integration interface offered by the Ploggs is proprietary. We implemented a Smart Gateway for the Ploggs that finds automatically all the Ploggs by scanning the environment for Bluetooth devices.  HTTP call on /EnergieVisible/SmartMeters/ with the GET method.  returns the list of all the smart meters connected to the gateway in the JSON format.  requesting the PUT method on lLampMeter/ status alongside with the HTTP payload status=off  turn the lamp connected to the smart meter off. Integrating smart things to the web 10

The system we proposed enables owners of smart things to share them on the Web easily. sensor readings are only shared amongst user registered on these platforms. one can enable switching on/off devices by close relatives. An system for sharing smart things 11

Social Access Controller creating the link between social networks and smart things. owners  people owing or administrating smart things.  trusted connections. owner and trusted connection could also be applications. An system for sharing smart things 12

Web of Things Constraints Addressability All the shareable functions offered by smart things should be modeled as resources which are addressable and identified by URLs. Uniform Interface The actions available on resources should be compliant with the HTTP verbs (e.g. a GET on a resource retrieves a representation of that resource). Resource Description The embedded Web servers on smart things (or Smart Gateways) should support the HTTP OPTION method which allows for retrieving the authorized methods for any URL. All the resources should be listed on HTML linked together so that they are crawlable. An system for sharing smart things 13

Leveraging Social Network APIs SAC is an authentication proxy between clients (e.g. Web browsers) and the smart things. Rather than maintaining its own database or list of trusted connections and credentials - as it would be done with simple HTTP Authentication - it connects to a number of social networks to extract all potential users and groups one could share with. An system for sharing smart things 14

Leveraging Web Authentication APls Not only SAC needs to be able to retrieve lists of friends and relatives, it also needs a mechanism to authenticate owners and trusted connections. This is what open Web authentication APls provide: delegated authentication on the Web. A delegated authentication for SAC presents two advantages. owners and trusted connections do not need special credentials for accessing SAC. SAC does not need to hold profile information about the users (a user ID is enough). An system for sharing smart things 15

Sharing Based on Social Networks The sharing process occurs in three phases. First the owner accesses SAC by logging in using at least one of his social networks credentials. the smart thing to be shared has to be crawled in order to identify what are the resources and verbs of its RESTful API. the user generates the access control list of the smart thing by selecting which trusted connections can interact with what resource. An system for sharing smart things 16

Sharing Based on Social Networks Discovery by Crawling Things the owner must inform SAC about the smart things he owns.  credentials of smart thing and Smart Gateway smart things provide an HTML page describing and, most importantly, linking to their sub-resources. the crawler extracts the operations one can execute on resources by calling the HTTP method OPTION for each resource. Consider an owner who wants to share the RESTful Ploggs.  user -> Ploggs Smart Gateway base URI, e.g) /EnergyMonitor  crawling engine /EnergyMonitor/ploggs/Kettle /EnergyMonitor/ploggs/Light/status An system for sharing smart things 17

Sharing Based on Social Networks Discovery by Crawling Things An system for sharing smart things 18

Sharing Based on Social Networks Sharing Things SAC manages a list of all the social networks a user is currently logged in with. The owner selects the connections he wants to share his smart things with. He can either share complete smart things (e.g. a Plogg) or their sub-resources only.  read-only  read-write An system for sharing smart things 19

Accessing Shared Things When an owner shares resources with a trusted connection, the latter is informed about it directly on his social network. messages contains a link that redirects to the shared resource.  Facebook – newsfeed  Twitter – message To access it, the trusted connection can also login to SAC with his social network credentials. An system for sharing smart things 20

Syndication of Shared Data SAC provides a syndication mechanism that can be used to monitor several smart things at once. It consists of a Publisher Component which periodically polls the smart things for updates and sends the updates to a syndication server. Example scenario who can be informed when you leave work. who creates a simple physical mashup with Google Maps that shows friends available for a drink in the neighborhood. An system for sharing smart things 21

The described concepts have been implemented in a prototype implementation and tested with the RESTful Ploggs and the RESTful Sun SPOTs. The core of the system is SAC Publisher Components, applications, authentication, access control. Implementing two drivers Facebook Connect API Twitter API SAC is implemented on top of RESTlet, which is a comprehensive Java framework from implementing RESTful Web applications. System implementation 22

We also developed FAT which is an example of application that can be built upon the RESTful API of SAC. FAT is a JavaScript Web application implemented using the Google Web Tookit and provides Web-based user interface to the main functionality of SAC. System implementation 23

In this paper we have presented a system for sharing and controlling access to resources in a Web of Things. The core idea is to leverage existing online social structures rather than relying on closed databases of credentials. SAC provides a programmable basis upon which composite Web applications can build. Conclusion 24